12345678910111213141516171819202122 |
- --TEST--
- Testing null byte injection in imagejpeg
- --EXTENSIONS--
- gd
- --SKIPIF--
- <?php
- $support = gd_info();
- if (!isset($support['JPEG Support']) || $support['JPEG Support'] === false) {
- print 'skip jpeg support not available';
- }
- ?>
- --FILE--
- <?php
- $image = imagecreate(1,1);// 1px image
- try {
- imagejpeg($image, "./foo\0bar");
- } catch (TypeError $e) {
- echo $e->getMessage(), "\n";
- }
- ?>
- --EXPECT--
- imagejpeg(): Argument #2 ($file) must not contain null bytes
|